Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
NORTHBAY MEDICAL CENTER
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on October 8, 2012. Also cited in 9 other reports.
Report ID: KWU611.01, California Department of Public Health
Reported Entity: NORTHBAY MEDICAL CENTER
Issue:
Based on interview and document review, the hospital failed to prevent unauthorized access to two patients' protected health information, when hospital staff gave PHI for two patients to another patient at discharge.Findings:In interview on 10/8/12 at 2:30 pm, Staff A stated that on 8/15/12, Patient 3's mother called to say that her son had gotten Emergency Department (ED) discharge instructions intended for Patient 1 when he left the ED on 8/4/12. Patient 3's mother stated that her son did not get his own instructions. She stated that her son had also been given prescriptions intended for Patient 2. Patient 3's mother refused to send the documents back to the hospital, but she did agree to shred them. Staff A stated that discharge instructions typically include the patient's name, date of birth, encounter number, and diagnosis. Staff A stated that the information on prescriptions consists of name, age, sex, date of birth, phone number, type of insurance, and allergies. Staff A stated that it had not been possible to determine why Patient 3 received the other patients' information. Staff A stated that letters notifying Patients 1 and 2 of the breaches, were sent on 8/20/12.Document review on 10/8/12, demonstrated that Patient 1's discharge instructions included her name, date of birth, diagnosis, primary care provider, and medications. The form was signed by Patient 1 at 1:09 am, on 8/4/12. Document review on 10/8/12, demonstrated that Patients 2's prescription medicines were for narcotic pain medication and stomach upset medication.Document review confirmed that the hospital was informed of the breaches on 8/15/12. Letters to both patients were sent on 8/20/12. The Department was notified on 8/17/12.
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280